REMARKS/ARGUMENTS 



Prior to issuance of a first Office Action, the Applicant requests entry of this Preliminary 
Amendment which adds claims directed to features of the present invention which were not included 
as part of the originally submitted claims but which are fully supported by the specification. For 
convenience purposes in claim numbering, original Claim 5 has been cancelled and rewritten as new 
Claim 34. 

Attached hereto is a marked up version of the changes made to the specification and claims 
by the current amendment. The attached page is captioned "Version With Markings to Show 
Changes Made." 

Respectfully submitted, 
SHERIDAN ROSS P.C. 



Dated: 




Todd P. Blakely 
Registration No. 31,328 
1560 Broadway, Suite 1200 
Denver, Colorado 80202-5141 
(303) 863-9700 
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VERSION WITH MARKINGS TO SHOW CHANGES MADE 



In the Claims : 

1 . (Amended) In a [local area] computer network [attached to a larger network], 
a method for maintaining an acceptable use policy comprising: 

a. monitoring network communications [of users comprising the local 

area network] ; 

5 lx storing at least some of said communications; 

[b] c. testing the stored communication for the presence of at least one 
preselected criterion[a]; 

[c] d. deleting the communication if the presence of said at least one 
preselected criterion[a] is not determined; 

10 [d]e. storing the communication if the presence of said at least one 

preselected criterion[a] is determined. 

2. (Amended) The method of claim L wherein the [said] preselected criterion[a] 
comprises one or more subject matter categories[ of regular expressions], 

3. (Amended) The method of claim [3] 2, wherein at least some of said subject 
matter categories comprise regular expressions[ are weighted]. 

4. (Amended) The method of claim 3, wherein said regular expressions are 
weighted[ with either positive or negative values]. 

5. Cancel. 

6^ (New) The method of claim 2, wherein the preselected criterion is weighted. 
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7. (New) The method of claim 4, wherein said regular expressions are weighted 
with either positive or negative values. 

8^ (New) The method of claim 7, wherein regular expressions within a subject 
matter category having a negative value are before regular expressions having a positive 
value. 

9. (New) The method of claim 4. further comprising prioritizing the order in 
which regular expressions within a subject matter category are tested. 

10. (New) The method of claim 9, wherein said prioritizing reduces the likelihood 
of false hits. 

11. (New) The method of claim L where the computer network is a TCP/IP 
network. 

12. (New) The method of claim L wherein the computer network is a wide area 
network. 

13. (New) The method of claim 1 , wherein the computer network is a local area 
network. 

14. (New) The method of claim 2. wherein the presence of the preselected 
criterion in at least one of said categories comprises a match in a plurality of categories. 

15. (New) The method of claim 2, wherein said subject matter categories 
comprise key words. 

16. (New) The method of claim 15. wherein at least some of said key words are 
defined by the user. 
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17. (New) The method of claim 2, further comprising assigning a threshold value 
to each subject matter category. 

18. (New) The method of claim 17, wherein at least some of said subject matter 
categories comprise one or more predetermined expressions. 

19. (New) The method of claim 18, further comprising assigning a value to said 
predetermined expressions. 

20. (New) The method of claim 19, further comprising summing the values of 
said predetermined expressions. 

21. (New) The method of claim 20, wherein said communication is further stored 
if the sum of the values of said predetermined expressions comprising a subject matter 
category equal or exceed the threshold value assigned to said subject matter category. 

22. (New) The method of claim 21, wherein the threshold value of at least one 
subject matter category comprises equaling or exceeding the threshold value in a plurality 
of subject matter categories. 

23. (New) The method of claim 21, wherein said threshold values assigned to said 
subject matter categories are variable. 

24. (New) The method of claim 18, wherein said subject matter categories have 
a hierarchical relationship. 

25. (New) The method of claim 24, wherein said hierarchical relationship 
comprises defining the threshhold value for at least one subject matter category as the 
presence of predetermined expressions in a plurality of other subject matter caterogies. 
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26. (New) The method of claim 24, wherein said hierarchical relationship 
comprises defining the threshhold value for at least one subject matter category as matching 
or exceeding the threshold value assigned to a plurality of other subject matter categories. 

27. (New) The method of claim 1 , further comprising outputting a report relating 
to the presence of said at least one preselected criterion. 

28. (New) The method of claim 27, wherein said report identifies individuals 
whose use of the computer network included communications which matched preselected 
criterion. 

29. (New) The method of claim 27, wherein said report identifies network 
addresses where communications were received or originated that included matched 
preselected criterion. 

30. (New) The method of claim 2, further comprising outputting a report relating 
to the presence of preselected criterion, wherein said report identifies the number of matches 
in a category. 

31. (New) The method of claim 30, wherein said report is in a graphical format. 

32. (New) The method of claim 27, wherein said report provides the text of all 
communications that match said preselected criterion. 

33. (New) The method of claim 27, wherein said report is in a human readable 

format. 

34. (New) A method for monitoring and maintaining an acceptable use policy 
for computer network usage comprising: 

a. capturing data on a network; 
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b. removing data content that does not contain language elements: 

c. testing the remaining content for the presence of predetermined 

expressions; 

<± maintaining a sum of values associated with said predetermined 
expressions found within at least one category; 

e. storing the remaining data if the sum of values associated with said 
predetermined expressions within a category meets or exceeds a threshold value. 

35. (New) The method of claim 34, wherein said computer network is a wide 
area network. 

36. (New) The method of claim 34, wherein said computer network is a local 
area network. 

37. (New) The method of claim 34, wherein said computer network is a TCP/IP 
area network. 

38. (New) The method of claim 34, wherein said expressions are weighted. 

39. (New) The method of claim 38, wherein said expressions are weighted with 
either positive or negative values. 

40. (New) The method of claim 39, further comprising prioritizing the order in 
which regular expressions within a subject matter category are tested. 

41. (New) The method of claim 40, wherein the negative valued regular 
expressions are tested first. 

42. (New) The method of claim 41, wherein said negative and positive valued 
regular expressions are separately tested in the order of largest value to smallest value. 
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43. (New) The method of claim 40, wherein the order of said prioritizing is 
determined based upon reducing the likelihood of false hits. 

44. (New) The method of claim 34, wherein said expressions include regular 
expressions. 

45. (New) The method of claim 34, wherein the threshold value for at least one 
category comprises meeting or exceeding the threshold value for a plurality of other 
categories. 

46. (New) The method of claim 34, wherein the threshold value of at least one 
category comprises meeting or exceeding the threshold value for at least one other category 
and not meeting or exceeding the threshold value for at least another category. 

47. (New) The method of claim 35, wherein said threshold value for a category 
is variable. 

48. (New) The method of claim 34. further comprising outputting a report 
relating to the presence of predetermined expressions. 

49. (New) The method of claim 48, wherein said report identifies individuals 
whose use of the computer network included communications which matched predetermined 
expressions. 

50. (New) The method of claim 48, wherein said report identifies network 
addresses where communications were received or originated that included matched 
predetermined expressions. 
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51. (New) The method of claim 34, further comprising outputting a report 
relating to the presence of predetermined expressions, wherein said report identifies the 
number of matches in a category. 

52. (New) The method of claim 50, wherein said report is in a graphical format. 

53. (New) The method of claim 48, wherein said report provides the text of all 
communications that match said predetermined expressions. 

54. (New) The method of claim 48, wherein said report is in a human readable 

format. 

55. (New) . A method for monitoring and maintaining an acceptable use policy 
for computer network usage comprising: 

capturing data on a network; 
K removing data content that does not contain language elements; 
c. defining categories with weighted predetermined expressions; 

c. testing the remaining content for the presence of predetermined 

expressions; 

d. maintaining a sum of values associated with said predetermined 
expressions found within each category; 

storing the remaining data if the sum of values associated with said 
predetermined expressions present within a category exceeds a threshold value. 

56. (New) The method of claim 55, wherein said remaining data is stored only 
if the sum of predetermined expressions exceeds the threshold value in a plurality of 
categories. 



57. (New) The method of claim 55, wherein the threshold value for a category 
is defined as the presence of no predetermined expressions. 

58. (New) The method of claim 55. wherein said computer network is a wide area 
network. 

59. (New) The method of claim 55, wherein said computer network is a local area 
network. 

60. (New) The method of claim 55, wherein said computer network is a TCP/IP 
area network. 

61. (New) The method of claim 55. further comprising outputting a report relating 
to the presence of predetermined expressions whose sum meets or exceeds the threshold 
value of a category. 

62. (New) The method of claim 55, wherein said report identifies individuals 
whose use of the computer network included communications which contained 
predetermined expressions whose sum matched or exceeded the threshold value of at least 
one category. 

63. (New) The method of claim 55, wherein said report identifies network 
addresses where communications were received or originated that included predetermined 
expressions whose sum matched or exceeded the threshold value of at least one category. 

64. (New) The method of claim 63. wherein said reports are in a graphical format. 
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